Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
File:                     C9q2CGF_PDGDxHD05hmyeV91w4k.mft (raw, json)
Hash identifier:          nWCUr2JBX0CO8zOEfksS/nrzHaxJr9SToGaXc0fkgG0=
Subject key identifier:   DB:AD:02:E5:4D:98:AC:06:28:E4:BD:8E:2A:B1:24:63:5F:08:33:81
Authority key identifier: 0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89
Certificate issuer:       /CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
Manifest number:          0171
Signing time:             Sun 01 Mar 2026 05:46:45 +0000
Manifest this update:     Sun 01 Mar 2026 05:46:45 +0000
Manifest next update:     Sun 08 Mar 2026 05:46:45 +0000
Files and hashes:         1: C9q2CGF_PDGDxHD05hmyeV91w4k.crl (hash: AjU1AI9n7Z2nuIRfJQ6jHVsszkfxQwhSQOFWHn81Brk=)
                          2: E3ABAA7AE69211EEB34D4B6AC4F9AE02.roa (hash: t0MIsf5kSKoBJahi6fRsfqa8r4EdM71pjRJoiRMsv1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl
                          rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91326B3, serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
        Validity
            Not Before: Mar  1 05:46:45 2026 GMT
            Not After : Mar  8 05:46:45 2026 GMT
        Subject: CN=69a3d2c5-486b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:a8:cc:66:7a:e3:25:fe:03:ae:cf:44:72:
                    9f:8f:66:af:17:d2:ad:83:59:92:16:85:de:0a:0d:
                    69:51:9a:03:57:b6:32:5f:c7:b2:9a:8e:c6:3f:d1:
                    40:16:25:90:e5:92:c0:46:d2:19:c7:5c:45:04:65:
                    de:c4:3c:f5:3c:0a:3d:0f:78:25:62:73:24:20:68:
                    da:78:5e:5f:67:4b:b9:3c:ca:4d:c6:18:63:6f:98:
                    c2:07:79:cd:af:41:f1:00:3f:39:1c:e5:0b:e7:cc:
                    eb:16:23:87:10:6c:99:39:06:75:34:74:86:9a:bc:
                    69:9b:69:e7:15:fa:5d:1b:ca:4f:d4:aa:b4:41:bb:
                    f2:e4:74:0e:7f:c2:b9:d2:1b:15:bb:24:62:cf:bb:
                    ae:06:c6:e0:40:1b:e6:03:e9:dd:2f:70:0a:b8:df:
                    42:40:c1:2c:c1:17:25:9c:98:52:c2:f9:b8:1b:17:
                    35:31:b3:86:77:74:ba:fd:df:81:37:f5:6f:fe:2d:
                    a1:97:25:04:7b:5f:fe:22:83:fc:3f:c5:2e:fc:15:
                    7d:86:89:f4:92:86:af:0c:77:6f:7d:24:76:31:24:
                    88:61:f8:ac:50:11:ca:c7:90:5b:85:2f:ee:e3:91:
                    0e:9b:25:74:83:06:55:fa:3e:86:a4:ff:db:26:df:
                    6b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AD:02:E5:4D:98:AC:06:28:E4:BD:8E:2A:B1:24:63:5F:08:33:81
            X509v3 Authority Key Identifier:
                keyid:0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6d:ad:cc:6d:6f:9e:9c:16:8c:9e:89:76:36:35:c6:40:de:
         c7:a0:e4:65:a6:98:41:35:2c:e1:e0:ad:09:90:6b:81:d6:7c:
         f0:c6:4c:70:87:cf:f8:6d:44:06:0e:2a:e5:80:42:74:26:8f:
         4d:c8:28:e0:1b:6c:16:4f:6e:62:bc:d7:c9:cb:e8:ca:fc:93:
         ab:40:53:a4:db:06:8e:a2:9d:86:0a:51:bf:ad:70:91:3d:7a:
         03:5e:16:35:da:a3:c3:36:1a:7a:f4:ac:f9:13:e3:b1:0a:ba:
         87:6b:00:ec:9f:49:6a:aa:cb:10:a3:92:e6:b2:9b:c7:65:bc:
         db:b3:64:6d:49:70:c5:e5:99:cf:43:e8:37:17:32:66:68:a0:
         22:69:d6:f7:94:89:52:80:51:42:ba:33:c6:4d:57:70:d6:1f:
         0b:b3:55:21:68:09:08:30:a7:42:a2:2b:53:67:af:a6:3c:a4:
         fa:bd:2a:2a:39:82:56:79:5c:52:da:ab:d4:38:34:96:d5:8a:
         c3:60:54:b9:24:c8:ce:f2:23:98:57:b5:33:43:5d:31:df:c3:
         3d:ac:88:d7:6b:83:c8:3b:5c:74:9c:d5:35:40:2e:3c:16:af:
         b0:8d:dd:65:0f:17:72:1d:2b:6e:4f:04:e5:d8:53:42:8c:e7:
         9a:27:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:05 2026 by rpki-client